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In the Claims : 

Please replace all previous claim listings with the following claim listing: 

1 . (Currently Amended) A method of generating computer security threat management 
information, comprising: 

receiving notification of a computer security threat; 

generating a computer-actionable Threat Management Vector (TMV) that is suitable for 
use bv an automated threat management system from the notification that was received, the 
TMV including therein a first computer-readable field that provides identification of at least one 
system type that is affected by the computer security threat, a second computer-readable field 
that provides identification of a release level for the system type and a third computer-readable 
field that provides identification of a set of possible counterrneasures for a system type and a 
release level; and 

transmitting the computer-actionable TMV that is generated to a plurality of target 
systems for processing by the plurality of target systems, 

2. (Original) A method according to Claim 1 wherein the generating comprises selecting 
a system type, release level and possible counterrneasures from a database that lists system types, 
release levels and possible counterrneasures in a computer-readable format. 

3. (Original) A method according to Claim 1 wherein the system type comprises a 
computer operating system type and wherein the release level comprises a computer operating 
system release level. 

4. (Original) A method according to Claim 1 wherein the set of possible 
counterrneasures comprises an identification of a countermeasure mode of installation. 

5. (Original) A method according to Claim 1 wherein at least one of the identifications 
comprises a pointer. 
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6. (Original) A method according to Claim 1 wherein the TMV further includes therein 
a fourth computer-readable field that provides identification of at least one subsystem type that is 
affected by the computer security threat and a fifth computer-readable field that provides 
identification of a release level for the subsystem type, the third computer-readable field 
providing identification of a set of possible countermeasures for a subsystem type and a release 
level 

7. (Original) A method according to Claim 6 wherein the subsystem type comprises an 
application program type. 

8. (Original) A method according to Claim 1 wherein the TMV further includes therein 
a sixth computer-readable field that provides identification of the computer security threat. 

9. (Currently Amended) A system for generating computer security threat management 
information, comprising: 

a Threat Management Vector (TMV) generator that is configured to generate a 
computer-actionable TMV that is suitable for use by an automated threat management system 
from a notification of a computer security threat that is received, the TMV including therein a 
first computer-readable field that provides identification of at least one system type that is 
affected by the computer security threat, a second computer-readable field that provides 
identification of a release level for the system type and a third computer-readable field that 
provides identification of a set of possible countermeasures for a system type and a release level. 

10. (Original) A system according to Claim 9 wherein the TMV generator is also 
configured to transmit the TMV that is generated to a plurality of target systems for processing 
by the plurality of target systems. 

1 L (Original) A system according to Claim 9 further comprising a common semantics 
database that lists system types, release levels and possible countermeasures in a 
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computer-readable format, wherein the TMV generator is responsive to the common semantics 
database to generate the TMV based upon user selection of a system type, release level and 
possible countermeasures from the common semantics database for the computer security threat. 

12. (Original) A system according to Claim 9 wherein the system type comprises a 
computer operating system type and wherein the release level comprises a computer operating 
system release level 

13. (Original) A system according to Claim 9 wherein the set of possible 
countermeasures comprises an identification of a countermeasure mode of installation. 

14. (Original) A system according to Claim 13 wherein the set of possible 
countermeasures further comprises a pointer to a remediation to be applied as a countermeasure. 

15. (Original) A system according to Claim 9 wherein the TMV further includes therein 
a fourth computer-readable field that provides identification of at least one subsystem type that is 
affected by the computer security threat and a fifth computer-readable field that provides 
identification of a release level for the subsystem type, the third computer-readable field 
providing identification of a set of possible countermeasures for a subsystem type and a release 
level. 

16. (Original) A system according to Claim 15 wherein the subsystem type comprises an 
application program type. 

17. (Original) A system according to Claim 9 wherein the TMV further includes therein 
a sixth computer-readable field that provides identification of the computer security threat. 

1 8. (Currently Amended) A computer-actionable computer security Threat Management 
Vector (TMV) comprising: 
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a first computer-readable field that provides identification of at least one system type that 
is affected by a computer security threat; 

a second computer-readable field that provides identification of a release level for the 
system type; and 

a third computer-readable field that provides identification of a set of possible 
countermeasures for a system type and a release level 

wherein the TMV is in a format suitable for u se b y an automated threat management 

system . 

19. (Original) A TMV according to Claim 18 wherein the system type comprises a 
computer operating system type and wherein the release level comprises a computer operating 
system release level. 

20. (Original) A TMV according to Claim 18 wherein the set of possible 
countermeasures comprises an identification of a countermeasure mode of installation. 

21. (Original) A TMV according to Claim 18 wherein at least one of the identifications 
comprises a pointer. 

22. (Original) A TMV according to Claim 18 further comprising: 

a fourth computer-readable field that provides identification of at least one subsystem 
type that is affected by the computer security threat; 

a fifth computer-readable field that provides identification of a release level for the 
subsystem types; and 

wherein the third computer-readable field provides identification of a set of possible 
countermeasures for a subsystem type and a release level 

23, (Original) A TMV according to Claim 1 8 wherein the TMV further includes therein a 
sixth computer-readable field that provides identification of the computer security threat. 



